Vulnerability in Oracle E-Business Suite Personalization Component
CVE-2025-50090
What is CVE-2025-50090?
A vulnerability exists in the Oracle Applications Framework component of Oracle E-Business Suite that allows a low privileged attacker with network access via HTTP to compromise sensitive data. Exploitation requires human interaction, with potential impacts on additional products beyond the framework. The vulnerability enables unauthorized updates, insertions, or deletions within accessible data, as well as unauthorized read access to some data sets. This vulnerability highlights the need for stringent security measures and timely patching to protect against potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Oracle Applications Framework 12.2.3 <= 12.2.14
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved